Effective Date: 18 April 2026
Last Updated: 18 April 2026

Openstash (“Openstash”, “we”, “our”, or “us”) respects your privacy and is committed to protecting personal information. This Privacy Policy explains how we collect, use, store, disclose, and otherwise handle personal information when you use our website, platform, and related services (collectively, the “Services”).

1. Information We Collect

We may collect the following categories of information.

a) Information You Provide to Us

Account Information
When you create an account, we may collect information such as your name, email address, username, password, profile image, bio, and account preferences.

Creator Information
If you use Openstash as a creator, we may collect business or payout-related information required to enable platform features or connect third-party payment services.

Transaction Information
When purchases are made through the platform, we may collect transaction details such as purchase amounts, timestamps, product details, order status, and limited payment-related metadata. Payment processing is handled by third-party providers such as Stripe. We do not store full payment card numbers.

Content and Communications
We may collect content you upload, publish, submit, message, or otherwise provide through the Services, including files, images, text, support requests, and feedback.

b) Information Collected Automatically

Usage Information
We may collect information about how you interact with the Services, such as pages viewed, clicks, actions taken, referring pages, time spent, and features used.

Device and Technical Information
We may collect information such as IP address, browser type, device type, operating system, approximate location, and diagnostic data.

Cookies and Similar Technologies
We may use cookies and similar technologies for authentication, security, remembering preferences, analytics, and improving the user experience.

2. How We Use Information

We may use personal information to:

• provide, operate, and maintain the Services

• create and manage accounts

• process purchases, subscriptions, payouts, and related records

• enable creators to publish and sell lawful digital products through the platform

• personalise user experience

• communicate with you about your account, updates, or support requests

• monitor usage and improve the Services

• detect, investigate, prevent, or address fraud, abuse, security incidents, or unlawful activity

• comply with legal and regulatory obligations

• enforce our Terms and protect our rights, users, and platform

• review accounts, transactions, and activity for compliance, fraud prevention, risk management, and platform safety

• investigate potential violations of our Terms or prohibited content policies and take enforcement action where necessary

3. How We Share Information

We do not sell personal information.

We may share information in the following circumstances:

Service Providers

We may share information with trusted third-party providers that help us operate the Services, such as providers for payments, hosting, cloud infrastructure, authentication, analytics, storage, customer support, and communications.

Payment Providers

Payments and payouts may be processed through third-party providers such as Stripe, who process information in accordance with their own terms and privacy policies.

Payment providers such as Stripe may independently collect, use, and verify information in accordance with their own legal obligations and privacy policies.

Between Users Where Necessary

Where required to complete a transaction, provide fulfilment, issue confirmations, respond to support matters, or comply with law, limited information may be shared between creators and customers.

Legal Reasons

We may disclose information where reasonably necessary to comply with law, legal process, enforce agreements, detect fraud, or protect rights, safety, and security.

Business Transfers

If Openstash is involved in a merger, acquisition, restructuring, financing, or sale of assets, information may be transferred as part of that transaction.

With Your Direction or Consent

We may share information where you ask us to do so or otherwise consent.

4. Cookies and Tracking Technologies

We may use cookies and similar technologies to:

• keep you signed in

• maintain security and prevent fraud

• remember settings and preferences

• understand platform usage and performance

• improve features and user experience

You may be able to control cookies through your browser settings, though some parts of the Services may not function properly if cookies are disabled.

5. Data Retention

We retain information for as long as reasonably necessary to:

• provide the Services

• maintain business and financial records

• comply with legal, tax, and regulatory obligations

• resolve disputes

• enforce agreements

• protect against fraud or abuse

Retention periods may vary depending on the type of data and legal requirements.

6. Data Security

We use reasonable technical, administrative, and organisational safeguards designed to protect information from unauthorised access, loss, misuse, or alteration.

However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. International Data Transfers

Your information may be processed or stored in countries other than your own, including where our service providers operate.

Where required by applicable law, we take reasonable steps to implement appropriate safeguards for cross-border data handling.

8. Your Rights and Choices

Depending on where you live and the laws that apply, you may have rights to:

• access personal information we hold about you

• request correction of inaccurate information

• request deletion of certain information

• object to or restrict certain processing

• withdraw consent where processing is based on consent

• opt out of marketing communications

• request a copy of your information where applicable

To make a privacy request, contact us at hello@openstash.io.

We may need to verify your identity before completing certain requests.

9. Third-Party Services and Links

The Services may contain links to or integrations with third-party services. Their privacy practices are governed by their own policies, not this Privacy Policy.

We encourage you to review their policies before using those services.

10. Children’s Privacy

Openstash is not intended for individuals under 16 years of age, or the age of majority where a higher age applies.

We do not knowingly collect personal information from children who are not permitted to use the Services. If you believe this has occurred, please contact us.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

If we make material changes, we may update the date above and provide additional notice where appropriate, such as through the website, platform, or email.

Your continued use of the Services after changes take effect is subject to the updated Privacy Policy.

12. Contact Us

If you have any questions, concerns, or privacy requests, contact us at:

📧 hello@openstash.io